MEDIUMcrates.io
GHSA-37wc-h8xc-5hc4· CVE-2025-25188Hickory DNS's DNSSEC validation may accept broken authentication chains
Modified: 9/10/2026
package
crates.io/hickory-proto
pkg:crates.io/hickory-proto
HIGHcrates.io
GHSA-3v94-mw7p-v465· RUSTSEC-2026-0118, RUSTSEC-2026-0120hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
Modified: 9/10/2026
MEDIUMcrates.io
GHSA-q2qq-hmj6-3wpp· RUSTSEC-2026-0119hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
Modified: 9/10/2026
MEDIUMcrates.io
GHSA-v7pc-74h8-xq2h· RUSTSEC-2025-0006Hickory DNS failure to verify self-signed RRSIG for DNSKEYs
Modified: 9/10/2026
—crates.io
RUSTSEC-2025-0006· GHSA-v7pc-74h8-xq2hHickory DNS failure to verify self-signed RRSIG for DNSKEYs
Modified: 10/28/2025
—crates.io
RUSTSEC-2026-0118· GHSA-3v94-mw7p-v465, RUSTSEC-2026-0120NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
Modified: 5/7/2026
—crates.io
RUSTSEC-2026-0119· GHSA-q2qq-hmj6-3wppCPU exhaustion during message encoding due to O(n²) name compression
Modified: 5/7/2026